Someone wrote in [personal profile] mjg59 2018-04-08 08:50 am (UTC)

Re: You're not making much sense

@ MJG59

I was referring to the UEFI-BIOS firmware setting for Secure Boot, which is usually accessed by pressing one of the Function keys during startup, eg F2/F9/F10/F12/Delete.

So, you are saying that you can guarantee that M$ and the OEMs will continue to allow Secure Boot to be disabled in UEFI-BIOS setup on all their new Win 10 computers.

I'm aware that shim and mok keys can over-ride M$'s control of Secure Boot when SB is enabled. But this is usually used by tech-geeks, and not by the average users.

Like I said earlier, if Secure Boot cannot be disabled in UEFI-BIOS setup, your EFI-lockdown feature will automatically lockdown the Linux kernel during the install of the Linux distro. This will likely present difficulties to the average Linux users, eg when they need to unlock the kernel and edit the kernel boot parameter.

If Linux becomes harder to operate for the average users, eg with your Linux kernel efi-lockdown feature, M$'s Windows will likely continue to be a Win.
The main advantage of Windows over Linux is its very user-friendliness, esp for computer dummies and the average users. As is known, only about 5% of computer-users are tech-geeks or power-users. It is foolish if Linux caters only to this 5% market, eg the geeky Debian and Archlinux distros are not very popular.

Post a comment in response:

If you don't have an account you can create one now.
HTML doesn't work in the subject.
More info about formatting

If you are unable to use this captcha for any reason, please contact us by email at support@dreamwidth.org